Skip to main content
Skip table of contents

EPO:1095:ePO-AccessProtectionViolationNot Blocked

Vendor Documentation

Classification

Rule Name

Rule Type

Classification

Common Event

EPO:1095:ePO-AccessProtectionViolationNot BlockedBase RuleActivityGeneral Threat Message

Mapping with LogRhythm Schema

Device Key in Log MessageLogRhythm SchemaData TypeSchema Description
MachineNameN/AN/AName of the system hosting the detecting product.
AgentGUIDN/AN/AUnique identifier of the agent that forwarded the event.
IPAddress<dip>IP AddressIP address of the system hosting the detecting product (if given in the event).
OSNameN/AN/AN/A
UserNameN/AN/AN/A
TimeZoneBiasN/AN/AN/A
RawMACAddress<dmac>Text/String/NumberMAC address of the system hosting the detecting product.
ProductName<vendorinfo>Text/StringName of the detecting managed product.
ProductVersion<version>Text/String/NumberVersion number of the detecting product.
ProductFamilyN/AN/AN/A
AnalyzerN/AN/AN/A
AnalyzerNameN/AN/AName of the detecting managed product.
AnalyzerVersionN/AN/AVersion number of the detecting product.
AnalyzerHostNameN/AN/AName of the system hosting the detecting product.
AnalyzerDetectionMethodN/AN/AThe name of the task or task type that was responsible for detecting the threat.
EventID<vmid>NumberUnique identifier of the event class.
SeverityN/AN/AN/A
GMTTimeN/AN/AN/A
ThreatCategory<subject>Text/StringCategory of the event. Possible categories depend on the product.
ThreatEventIDN/AN/AN/A
ThreatName<threatname>Text/StringName of the threat.
ThreatTypeN/AN/AClass of the threat.
DetectedUTCN/AN/AN/A
ThreatActionTaken<action>Text/StringThe action taken by the product in response to the threat.
ThreatHandled<result>Text/String/NumberSpecifies whether the action taken was successful.
SourceUserName<domainorigin>
<login>
Text/StringUser name from which the threat originated (if given in the event).
SourceProcessName<process>Text/StringThe process name from which the threat originated.
TargetHostName<dname>Text/StringName of the system that created the event.
TargetUserName<domainimpacted>
<account>
Text/StringThe threat source user name or email address.
TargetFileName<object>Text/StringLocation of the threat on the detecting system.
ThreatSeverity<severity>Text/String/NumberThe severity of the detected threat as defined by each managed product.
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.